Issue
Using the provisioning package, the device failed to complete AAD Join. The issue can also be tracked under Audit Logs in Azure.
You will get an entry of the device that you are trying to onboard. Looking at the Azure audit logs, it shows that the device gets added and then gets removed immediately.
DeviceAADJoin failed with ‘0xCAA2000C’ at CSP node ‘AADJ/BPRT’. Provisioning failure can also be seen in the Event Viewer.
Workaround for Error 0xCAA2000C
While there could be multiple issues related to 0xCAA2000C, the one that worked for me was to exclude MFA for Intune Enrollment. After I created a Conditional Access Policy to exclude Intune Enrollment for MFA, I could see the device successfully getting joined to Azure AD using Provision Package.
Related Posts
- Fix Device Enrollment Error: DeviceAADJoin Failed with Error 0x8018000A
- Fix Windows 11 Intune Enrollment Error 0x800700b7 [Step-by-Step Guide
- Troubleshooting Intune Issues on Windows 10 / Windows 11
Explore More Intune Guides
Continue building your Microsoft Intune skills with step-by-step tutorials covering device management, application deployment, automation, and troubleshooting.
- Microsoft Intune Learning – Explore comprehensive guides on device enrollment, compliance policies, application deployment, Windows updates, and more.
- Device Management – Explore more device management guides covering Microsoft Intune, device configuration, enrollment, compliance, security, and Windows device management.
